{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "ransom", "trigger": true, "arguments": ["tool", "attacker", "victim", "attack pattern", "place", "payment method"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["vulnerable system", "capabilities", "supported platform", "discoverer", "common vulnerabilities and exposures", "time", "vulnerability", "vulnerable system owner"]}, {"event_type": "patch vulnerability", "trigger": true, "arguments": ["time", "patch number", "patch", "common vulnerabilities and exposures", "vulnerable system", "issues addressed", "supported platform", "vulnerable system version"]}, {"event_type": "phishing", "trigger": true, "arguments": ["trusted entity", "purpose", "attack pattern", "place", "damage amount", "attacker", "tool", "victim", "time"]}, {"event_type": "data breach", "trigger": true, "arguments": ["compromised data", "attack pattern", "damage amount", "time", "tool", "attacker", "place", "victim"]}], "input": "Those include false identities , the impersonation of real companies , the insertion of malicious code into a breached website , also known as \" watering hole attacks , \" and spear phishing , the process of pretending to be service providers like Gmail or Facebook to trick people into giving out personal information ."}
{"ransom": [], "discover vulnerability": [], "patch vulnerability": [], "phishing": [{"trigger": "pretending to be", "arguments": {"trusted entity": ["Gmail", "Facebook", "service providers"], "purpose": "NAN", "attack pattern": "NAN", "place": "NAN", "damage amount": "NAN", "attacker": "NAN", "tool": "NAN", "victim": "NAN", "time": "NAN"}}], "data breach": []}